EP2548333A4 - Pluggable token provider model to implement authentication across multiple web services - Google Patents

Pluggable token provider model to implement authentication across multiple web services Download PDF

Info

Publication number: EP2548333A4
Authority: EP; European Patent Office
Prior art keywords: web services; multiple web; token provider; implement authentication; provider model
Prior art date: 2010-03-18
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.): Withdrawn

Application number

EP11756849.3A

Other languages

German (de)

French (fr)

Other versions

EP2548333A2 (en

Inventor

Ranjith Narayanan

Rui Liang

Srivatsa Srinivasan

Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)

Microsoft Technology Licensing LLC

Original Assignee

Microsoft Technology Licensing LLC

Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)

2010-03-18

Filing date

2011-03-15

Publication date

2017-04-19

2011-03-15Application filed by Microsoft Technology Licensing LLCfiledCriticalMicrosoft Technology Licensing LLC

2013-01-23Publication of EP2548333A2publicationCriticalpatent/EP2548333A2/en

2017-04-19Publication of EP2548333A4publicationCriticalpatent/EP2548333A4/en

StatusWithdrawnlegal-statusCriticalCurrent

Classifications

- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/33—User authentication using certificates
- G06F21/335—User authentication using certificates for accessing specific resources, e.g. using Kerberos tickets
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/604—Tools and structures for managing or administering access control systems
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/105—Multiple levels of security
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/16—Implementing security features at a particular protocol layer
- H04L63/168—Implementing security features at a particular protocol layer above the transport layer
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
- H04L63/205—Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
- H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos

Landscapes

Engineering & Computer Science (AREA)
Computer Security & Cryptography (AREA)
Computer Hardware Design (AREA)
General Engineering & Computer Science (AREA)
Theoretical Computer Science (AREA)
Signal Processing (AREA)
Computer Networks & Wireless Communication (AREA)
Computing Systems (AREA)
Physics & Mathematics (AREA)
Software Systems (AREA)
General Physics & Mathematics (AREA)
General Health & Medical Sciences (AREA)
Bioethics (AREA)
Health & Medical Sciences (AREA)
Databases & Information Systems (AREA)
Automation & Control Theory (AREA)
Information Transfer Between Computers (AREA)
Storage Device Security (AREA)
Stored Programmes (AREA)

EP11756849.3A2010-03-182011-03-15Pluggable token provider model to implement authentication across multiple web servicesWithdrawnEP2548333A4 (en)

Applications Claiming Priority (2)

Application Number	Priority Date	Filing Date	Title
US12/726,779US8572710B2 (en)	2010-03-18	2010-03-18	Pluggable token provider model to implement authentication across multiple web services
PCT/US2011/028509WO2011115984A2 (en)	2010-03-18	2011-03-15	Pluggable token provider model to implement authentication across multiple web services

Publications (2)

Publication Number	Publication Date
EP2548333A2 EP2548333A2 (en)	2013-01-23
EP2548333A4true EP2548333A4 (en)	2017-04-19

Family

ID=44648292

Family Applications (1)

Application Number	Title	Priority Date	Filing Date
EP11756849.3AWithdrawnEP2548333A4 (en)	2010-03-18	2011-03-15	Pluggable token provider model to implement authentication across multiple web services

Country Status (5)

Country	Link
US (1)	US8572710B2 (en)
EP (1)	EP2548333A4 (en)
JP (1)	JP5714690B2 (en)
CN (1)	CN102812665B (en)
WO (1)	WO2011115984A2 (en)

Families Citing this family (40)

* Cited by examiner, † Cited by third party
Publication number	Priority date	Publication date	Assignee	Title
US8973108B1 (en)*	2011-05-31	2015-03-03	Amazon Technologies, Inc.	Use of metadata for computing resource access
US9369307B2 (en)	2011-07-12	2016-06-14	Bank Of America Corporation	Optimized service integration
US8719919B2 (en)	2011-07-12	2014-05-06	Bank Of America Corporation	Service mediation framework
US9015320B2 (en)	2011-07-12	2015-04-21	Bank Of America Corporation	Dynamic provisioning of service requests
US9635028B2 (en)*	2011-08-31	2017-04-25	Facebook, Inc.	Proxy authentication
US9495533B2 (en)*	2011-09-29	2016-11-15	Oracle International Corporation	Mobile application, identity relationship management
JP6066586B2 (en)*	2012-05-22	2017-01-25	キヤノン株式会社	Information processing system, control method thereof, and program thereof
WO2014011376A1 (en)*	2012-07-12	2014-01-16	Bank Of America Corporation	Optimized service integration
US9954843B2 (en)*	2013-02-28	2018-04-24	Microsoft Technology Licensing, Llc	Web ticket based upon a symmetric key usable for user authentication
US20140280494A1 (en)*	2013-03-14	2014-09-18	Microsoft Corporation	Relay Service for Different Web Service Architectures
US9158932B2 (en)	2013-05-08	2015-10-13	Sap Se	Modeled authorization check implemented with UI framework
US9112851B2 (en)	2013-06-18	2015-08-18	Sap Se	Integrating web protocols with applications and services
US9253212B2 (en)*	2013-09-24	2016-02-02	Microsoft Technology Licensing, Llc	Automated production of certification controls by translating framework controls
US9313208B1 (en)*	2014-03-19	2016-04-12	Amazon Technologies, Inc.	Managing restricted access resources
CN103905201B (en)*	2014-03-28	2017-02-15	北界无限（北京）软件有限公司	Interaction method and device for master application and multiple slave applications
CA2951052C (en)*	2014-06-02	2023-09-26	Datex, Inc.	Tokenizing network appliance and method
CN104601328A (en)*	2014-12-18	2015-05-06	中电科华云信息技术有限公司	Component safety calling system and calling method
US9888034B2 (en)	2014-12-24	2018-02-06	Oracle International Corporation	Pluggable API firewall filter
CN105847220A (en)*	2015-01-14	2016-08-10	北京神州泰岳软件股份有限公司	Authentication method and system, and service platform
CN107924437A (en)*	2015-06-17	2018-04-17	瑞典爱立信有限公司	Method and associated wireless devices and server for the security provisions for making it possible to realize voucher
CN105791259B (en)*	2015-10-26	2018-11-16	北京中金国盛认证有限公司	A kind of method of personal information protection
CN106570399B (en)*	2016-09-30	2019-07-12	西北大学	A kind of detection method of across App inter-module privacy leakage
CN107370668B (en)*	2017-08-25	2020-04-28	北京百度网讯科技有限公司	Method, device and system for remote control of intelligent equipment
US11063762B1 (en)*	2018-02-22	2021-07-13	Allscripts Software, Llc	Computing system for inter-application communication
US11568039B2 (en)*	2018-06-03	2023-01-31	Apple Inc.	Credential manager integration
CN109117609B (en)*	2018-08-31	2021-01-29	中国农业银行股份有限公司	Request intercepting method and device
US11240030B2 (en)*	2018-12-27	2022-02-01	Paypal, Inc.	Token management layer for automating authentication during communication channel interactions
US11676011B2 (en)*	2019-10-24	2023-06-13	International Business Machines Corporation	Private transfer learning
US12315620B2 (en)*	2019-11-27	2025-05-27	GE Precision Healthcare LLC	Enhanced enterprise image reading with search and direct streaming
US12149516B2 (en)*	2020-06-02	2024-11-19	Flex Integration, LLC	System and methods for tokenized hierarchical secured asset distribution
US11770377B1 (en)*	2020-06-29	2023-09-26	Cyral Inc.	Non-in line data monitoring and security services
EP4173232A1 (en)*	2020-06-29	2023-05-03	Illumina, Inc.	Temporary cloud provider credentials via secure discovery framework
US11184403B1 (en)	2021-04-23	2021-11-23	Netskope, Inc.	Synthetic request injection to generate metadata at points of presence for cloud security enforcement
US11190550B1 (en)	2021-04-22	2021-11-30	Netskope, Inc.	Synthetic request injection to improve object security posture for cloud security enforcement
US11336698B1 (en)*	2021-04-22	2022-05-17	Netskope, Inc.	Synthetic request injection for cloud policy enforcement
US11647052B2 (en)	2021-04-22	2023-05-09	Netskope, Inc.	Synthetic request injection to retrieve expired metadata for cloud policy enforcement
US11178188B1 (en)	2021-04-22	2021-11-16	Netskope, Inc.	Synthetic request injection to generate metadata for cloud policy enforcement
US11271973B1 (en)	2021-04-23	2022-03-08	Netskope, Inc.	Synthetic request injection to retrieve object metadata for cloud policy enforcement
US11271972B1 (en)	2021-04-23	2022-03-08	Netskope, Inc.	Data flow logic for synthetic request injection for cloud security enforcement
US11943260B2 (en)	2022-02-02	2024-03-26	Netskope, Inc.	Synthetic request injection to retrieve metadata for cloud policy enforcement

Citations (3)

* Cited by examiner, † Cited by third party
Publication number	Priority date	Publication date	Assignee	Title
US20080148345A1 (en)*	2006-12-19	2008-06-19	Canon Kabushiki Kaisha	Single point authentication for web service policy definition
US20080301784A1 (en)*	2007-05-31	2008-12-04	Microsoft Corporation	Native Use Of Web Service Protocols And Claims In Server Authentication
EP2051179A1 (en)*	2007-10-15	2009-04-22	Sap Ag	Composite application using security annotations

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number	Priority date	Publication date	Assignee	Title
US6006264A (en)*	1997-08-01	1999-12-21	Arrowpoint Communications, Inc.	Method and system for directing a flow between a client and a server
WO2002057917A2 (en)*	2001-01-22	2002-07-25	Sun Microsystems, Inc.	Peer-to-peer network computing platform
US7987501B2 (en)*	2001-12-04	2011-07-26	Jpmorgan Chase Bank, N.A.	System and method for single session sign-on
US7222148B2 (en)*	2002-05-02	2007-05-22	Bea Systems, Inc.	System and method for providing highly available processing of asynchronous service requests
US20040059590A1 (en)*	2002-09-13	2004-03-25	Dwayne Mercredi	Credential promotion
US8346929B1 (en)*	2003-08-18	2013-01-01	Oracle America, Inc.	System and method for generating secure Web service architectures using a Web Services security assessment methodology
US8112103B2 (en)*	2004-01-16	2012-02-07	Kuang-Chao Eric Yeh	Methods and systems for mobile device messaging
US20050268326A1 (en)*	2004-05-04	2005-12-01	Microsoft Corporation	Checking the security of web services configurations
US7788716B2 (en)	2004-05-21	2010-08-31	Bea Systems, Inc.	Token handler API
US20060005234A1 (en)*	2004-06-30	2006-01-05	International Business Machines Corporation	Method and apparatus for handling custom token propagation without Java serialization
US7603555B2 (en)	2004-12-07	2009-10-13	Microsoft Corporation	Providing tokens to access extranet resources
US7562382B2 (en)	2004-12-16	2009-07-14	International Business Machines Corporation	Specializing support for a federation relationship
US20070174429A1 (en)*	2006-01-24	2007-07-26	Citrix Systems, Inc.	Methods and servers for establishing a connection between a client system and a virtual machine hosting a requested computing environment
EP1895440A1 (en)	2006-09-01	2008-03-05	Nokia Siemens Networks Gmbh & Co. Kg	Token-based service access
US20080086766A1 (en)*	2006-10-06	2008-04-10	Microsoft Corporation	Client-based pseudonyms
WO2008085203A2 (en)*	2006-12-29	2008-07-17	Prodea Systems, Inc.	Presence status notification from digital endpoint devices through a multi-services gateway device at the user premises
US8656472B2 (en)*	2007-04-20	2014-02-18	Microsoft Corporation	Request-specific authentication for accessing web service resources
US20080263644A1 (en)*	2007-04-23	2008-10-23	Doron Grinstein	Federated authorization for distributed computing
US20090057396A1 (en)	2007-08-27	2009-03-05	Eric Barbour	Method and system for multiple account, token-based single transactions
JP5018536B2 (en)*	2008-02-15	2012-09-05	日本電気株式会社	Information service search system, patrol collection method, and information service patrol collection program
US8296828B2 (en)*	2008-12-16	2012-10-23	Microsoft Corporation	Transforming claim based identities to credential based identities

2010
- 2010-03-18USUS12/726,779patent/US8572710B2/enactiveActive
2011
- 2011-03-15WOPCT/US2011/028509patent/WO2011115984A2/enactiveApplication Filing
- 2011-03-15EPEP11756849.3Apatent/EP2548333A4/ennot_activeWithdrawn
- 2011-03-15JPJP2013500154Apatent/JP5714690B2/enactiveActive
- 2011-03-15CNCN201180014279.3Apatent/CN102812665B/enactiveActive

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number	Priority date	Publication date	Assignee	Title
US20080148345A1 (en)*	2006-12-19	2008-06-19	Canon Kabushiki Kaisha	Single point authentication for web service policy definition
US20080301784A1 (en)*	2007-05-31	2008-12-04	Microsoft Corporation	Native Use Of Web Service Protocols And Claims In Server Authentication
EP2051179A1 (en)*	2007-10-15	2009-04-22	Sap Ag	Composite application using security annotations

Also Published As

Publication number	Publication date
EP2548333A2 (en)	2013-01-23
WO2011115984A3 (en)	2011-12-15
JP2013522773A (en)	2013-06-13
CN102812665B (en)	2015-07-08
JP5714690B2 (en)	2015-05-07
US20110231921A1 (en)	2011-09-22
US8572710B2 (en)	2013-10-29
CN102812665A (en)	2012-12-05
WO2011115984A2 (en)	2011-09-22

Publication	Publication Date	Title
EP2548333A4 (en)	2017-04-19	Pluggable token provider model to implement authentication across multiple web services
GB201412128D0 (en)	2014-08-20	Dynamically-executed syndication services
EP2596711A4 (en)	2017-10-04	Supporter
PL2630108T3 (en)	2018-07-31	HOW TO MAKE 2,3,3,3-TETRAFLUOROPROPEN
IL225762A0 (en)	2013-06-27	Substituted 6-amino-nicotinamides as kcnq2/3 modulators
EP2583280A4 (en)	2014-06-18	Balanced on-die termination
IL220753A (en)	2016-04-21	Syndication of multiple services instances
EP2548182A4 (en)	2015-12-09	PROVIDER
EP2671182A4 (en)	2017-04-26	Secure active element machine
ZA201302266B (en)	2016-02-24	Substituted 2-oxy-quinoline-3-carboxamides as kcnq2/3 modulators
EP2727020A4 (en)	2015-07-08	Provide services using unified communication content
ZA201302265B (en)	2021-05-26	Substituted 2-oxo-and 2-thioxo-dihydroquinoline-3-carboxamides as kcnq2/3 modulators
DE112011100002A5 (en)	2012-08-23	NETWORK ELEMENT
EP2622419A4 (en)	2017-02-22	Turf management
EP2797640B8 (en)	2016-09-21	Fibrous structure
FR2957255B1 (en)	2012-03-09	COSMETIC COMPOSITION COMPRISING A MODIFIED GUM
AU2012904399A0 (en)	2012-10-25	I'll Pay!
AU2010903874A0 (en)	2010-09-16	Network interaction
AU2010904103A0 (en)	2010-09-30	Improvements Relating to Fabricated Poles
AU2012258340A1 (en)	2012-12-20	Web user interface
AU2010100093A4 (en)	2010-03-04	I Pay
AU2010100622A4 (en)	2010-07-22	Softening Shower Filter
BR302012000203S1 (en)	2014-12-02	"DISPENSER APPLICATION"
AU2010900392A0 (en)	2010-02-18	Eco Credits
ES1074327Y (en)	2011-07-14	SWEET KNIFE

Legal Events

Date	Code	Title	Description
2012-12-21	PUAI	Public reference made under article 153(3) epc to a published international application that has entered the european phase	Free format text:ORIGINAL CODE: 0009012
2013-01-23	17P	Request for examination filed	Effective date:20120917
2013-01-23	AK	Designated contracting states	Kind code of ref document:A2 Designated state(s):AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR
2013-06-26	DAX	Request for extension of the european patent (deleted)
2015-03-18	RAP1	Party data changed (applicant data changed or rights of an application transferred)	Owner name:MICROSOFT TECHNOLOGY LICENSING, LLC
2017-04-19	A4	Supplementary search report drawn up and despatched	Effective date:20170321
2017-04-19	RIC1	Information provided on ipc code assigned before grant	Ipc:H04L 29/08 20060101ALI20170315BHEP Ipc:G06F 21/33 20130101ALI20170315BHEP Ipc:G06F 9/54 20060101ALI20170315BHEP Ipc:H04L 9/32 20060101AFI20170315BHEP Ipc:G06F 21/60 20130101ALI20170315BHEP Ipc:H04L 29/06 20060101ALI20170315BHEP Ipc:G06F 21/62 20130101ALI20170315BHEP
2018-03-09	STAA	Information on the status of an ep patent application or granted ep patent	Free format text:STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN
2018-04-11	18D	Application deemed to be withdrawn	Effective date:20171018

Movatterモバイル変換